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Introduction 

This paper describes the design and implementation of a fully autonomous and 
programmable autopilot system for small scale autonomous unmanned aerial vehicle 
(UAV) aircraft. This system was implemented in Reflection and has flown on the 
Exploration Aerial Vehicle (EAV) platform at NASA Ames Research Center, currently 
only as a safety backup for an experimental autopilot. The EAV and ground station are 
built on a component-based architecture called the Reflection Architecture. The 
Reflection Architecture is a prototype for a real-time embedded plug-and-play avionics 
system architecture which provides a transport layer for real-time communications 
between hardware and software components, allowing each component to focus solely on 
its implementation. The autopilot module described here, although developed in 
Reflection, contains no design elements dependent on this architecture. 




Figure 1. Components of the UAV Flight System 


The UAV system is composed of two main components: a ground station component 
which provides telemetry feedback for the operator and allows for control of the aircraft, 
and a flight system component onboard the vehicle. The component details are shown in 
Table 1. 


Tablet. System Hardware 



Ground Station 

Flight System 

Platform/Airframe 

Dell Mobile Workstation 

Hanger 9 Quarter Scale 
Cessna 172 

CPU 

DELL Precision M70 
Workstation, Pentium M 770, 
2.13GHz, 2GB RAM 

Digital Logic MSMP3SEV, 
Pentium-Ill, 700MHz, 256MB 
RAM 

Operating System 

Windows XP Professional 

Windows XP Embedded 

Real-Time Infrastructure 

Reflection Architecture 

Reflection Architecture 

Communications 

Microhard Spectra 910, 1 W 
902-928MHz RF Modem 

Microhard MHX-910, 1 W 902- 
928MHz RF Modem 

Avionics 


Athena Guidestar GS1 1 1 m 
INS/GPS 



Pontech SV203 Servo Controller 



Custom Servo Switching Board 


Ground Station Monitoring and Control 

With the Reflection plug-and-play architecture, simulation and hardware can be mixed on 
the fly for in-situ simulation testing of hardware components at any level of granularity. 
When implementing the final ground station controller, several simulation components 
were reused to provide telemetry data back to the ground station. A screenshot of the 
ground station is shown in Figure 2 below. 



Figure 2, Screenshot of Ground Station with 3D Visualization 

The bottom left window provides a graphical interface for configuring and manipulating 
waypoint commands. Waypoints can be manipulated on a 2D representation of the 
terrain; waypoints are overlaid on GPS-localized 2D bitmap images. Once a mission is 
programmed, the user can ‘upload’ the commands to the aircraft. The ground station 
generates remote method invocations on the remote autopilot module, and passes these 
invocation requests to the Reflection distributed transport layer (RDTL). The RDTL 
converts the invocation requests into Reflection Virtual Machine byte-code commands 
and sends the commands over to the autopilot component via the 900 MHz 
communications link. On the flight computer, the RDTL receives and assembles the 
invocation requests, then executes the commands on the autopilot module. 

Autopilot System Overview 

The autopilot system is implemented as a stand alone plug-in component in the 
Reflection Architecture. Data flow through the system conceptually follows the diagram 
shown in Figure 3. Command objects generate FMS lateral and longitudinal mode 
instructions for the FMS. The FMS in turn generates controller mode instructions, which 
are used by the controller to command the actuators of the vehicle. The state information 
and the actuator commands are generated by external plug-and-play Reflection modules. 
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Figure 3. Conceptual Data Flow and Components 

The top-most object in the control system is an instance of the AutopilotSystem class, as 
shown in Figure 4. The AutopilotSystem class is responsible for communicating with the 
rest of the Reflection system and maintaining the two main objects in the system: the 
FMS (flight management system) and the Controller. The FMS is responsible for 
maintaining the list of commands which specify FMS mode instructions. The mode 
instructions are used by the FMS to provide targets to the controller. The controller is 
responsible for implementing the control loops which control the aircraft through the 
vehicle’s actuators. 


AutopilotSystem 

-m_fms : FMS 

-mcontroller : Controller 

-m_vehicleState : VehicleState 

+OnComponentUpdate() 

+OnComponentReset() 

+OnComponentlnit() 

+OnComponentTerminate() 


FMS 

-m_commandList[] : Command 
-m_pActiveCommand : Command* 
-m_timelnCommand_sec : double 
+ Update() 


♦ 


Controller 


+Update() 


VehicleState 

-m_position_enuft[3] 
-m_orientationEuler_rad[3] 
-rri_indicatedAirspeed_fps[1 ] 
-m_altitude_sonarFt[1 ] 


C..* 


Command 


■+lnit() 

+Update() 

+ lsComplete() ; bool 


Figure 4. Top-Level Classes in the Autopilot System 

Commands in the Flight Management System 

The flight management system class is a state machine that controls the continuous 
feedback control system in the controller object. The FMS is responsible for maintaining 
a database of mission program, keeping track of the mission program execution, and 
setting the modes of the controller object’s feedback loops. 

The mission program is implemented Command objects, which are stored in a 
programmable list in the FMS. The command list is an ordered list of commands that can 
be programmed on the ground, or reprogrammed while the aircraft is in the air. In 
implementation, the Command class is a virtual interface class, from which specific types 




of command classes inherit. All commands implement the interfaces defined by the base 
class, which includes methods to initialize their internal state, update their internal state at 
each OnComponentUpdateO callback, and to notify the FMS when the command 
objectives have been met. 


Controller commands can be programmed through the ReflectionScript language, which 
interprets text-based commands into binary code which is passed to the Reflection Virtual 
Machine. The following scripts are examples of programmed routes for the Reflection 
component. 


// Program the Autpoilot System, 
ob jAutopilot . ClearCommandList ( ) ; 

ob jAutopilot . AddCommand_Takeof f ( 

4500, -2000, 500.0, 

o 

o 

CO 

1000.0, 

-0.34907, 50.0 ); 

ob jAutopilot . AddCommand_FlyToTrack ( 8070.9, -6009.7, 500.0, 

// Following heading until specified altitude is reached. 

o 

o 

CO 

1000.0 ) ; 

ob jAutopilot . AddCommnd_SetFMSMode 

HEADINGHOLD, 0.0, 

ALTCMD , 

400.0, 

SPDCMD , 80, 

ALTITUDE, GT, 300 ) ; 

cmd=ob jAutopilot . AddCommand_FlyToTrack ( 10107.0, -1390.7, 500.0, 80 

.0, 1000.0 ) ; 

ob jAutopilot . AddCommand_FlyToTrack 

( 8904.5, -902.8, 

500.0, 

o 

o 

00 

1000.0 ) ; 

ob jAutopilot . AddCommand_FlyToTrack 

( 6919.8, -5568.9, 

500.0, 

o 

o 

00 

1000.0 ) ; 

ob jAutopilot . AddCommand_FlyToTrack 

( 3357.4, 1364.9, 

500.0, 

o 

o 

00 

1000.0 ) ; 

ob jAutopilot . AddCommand_FlyToTrack 

( -3319.9, 4457.2, 

500.0, 

o 

o 

00 

1000.0 ) ; 

ob jAutopilot . AddCommand_FlyToTrack 

( -5436.1, 3980.7, 

500.0, 

o 

o 

00 

1000.0 ) ; 

ob jAutopilot . AddCommand_FlyToTrack 

( -4371.0, 1696.2, 

200.0, 

o 

o 

00 

1000.0 ) ; 

ob jAutopilot . AddCommand_FlyToTrack 

( -741.1, 182.6, 

50.0 , 

o 

o 

00 

1000.0 ) ; 

ob jAutopilot . AddCommand_FlyToTrack 
ob jAutopilot . AddCommand_Jump ( cmd 

( 2522.8, -1267.5, 

) ; 

-10.0, 

o 

o 

00 

1000.0 ); 


Figure 5. Sample Control Program. 


At the start of the mission, the controller activates the first command, which might be a 
Takeoff command for an autonomous takeoff. The update sequence, shown in Figure 6, 
is very simple sequence of steps; the FMS object is only responsible for maintaining the 
current state, transitioning between states at the appropriate time. At each component 
update callback, the FMS calls the Update() method of the active command, which 
updates its internal state. The FMS then checks the IsComplete() method of the 
command; when TRUE is returned, the FMS transitions to the next command, and signals 
a Reflection event in case any other Reflection component is monitoring autopilot state 
transitions. 









Figure 6. FMS Updates 


The FMS internally maintains three different FMS control modes, an FMS lateral mode, 
FMS longitudinal mode, and FMS speed mode. The active command object internally 
maintains a state machine which outputs FMS mode commands and targets appropriately 
to meet the objectives of each command. 

Command Types 

Command: Direct To Waypoint 

The DirectToWaypoint class controls the vehicle mostly through heading commands 
towards a specified 3D waypoint. When initiated, the DirectToWaypoint stores the initial 
position of the aircraft and the position of the next waypoint (if there is one). Depending 
on the transition mode, the command uses this information to determine the size of the 
waypoint radius based on current aircraft speed to allow a turn to the next waypoint 
without overshoot, and to determine if the aircraft has passed the waypoint based on a 2D 
axis perpendicular to the line from the initial position to the waypoint position, and 
passing through the waypoint. 



Figure 7. DirectToWaypoint Diagram 


In implementation, the DirectToWaypoint class inherits from the Command base class, 
ass shown in Figure 8. 



Figure 8. DirectToWaypoint Class 

The DirectToWaypoint command sets the lateral FMS mode to ‘FlyToWaypoint’, and 
outputs a heading command. The longitudinal mode and speed mode are selected based 
on the waypoint command; the longitudinal controls or the speed controls can be used to 


control either airspeed, altitude, or follow the vertical track between waypoints. Having 
throttle control altitude is the default, for safety if the engine fails. 
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Figure 9. DirectTo Waypoint Command FMS Modes 
Command: TrackToWavpoint 


The TrackToWaypoint command is similar to the DirectTo Waypoint command, except 
that the aircraft is controlled to fly the track from the previous waypoint to the next 
waypoint, rather than heading straight to the waypoint. Similar to the DirectToWaypoint 
command, the transition to the next waypoint can be triggered by penetration of the 
perpendicular axis or the transition radius, which can be calculated based on the current 
aircraft state and the performance characteristics of the aircraft (turning radius). 



Figure 10. TrackToWavpoint Diagram 


The TrackToWaypoint commands the TrackToWaypoint lateral FMS mode. The 
longitudinal mode is set to AltitudeCommand. 



Figure 11. TrackToWavpoint FMS Mode State Diagram 


The manner in which the altitude is captured can be set by the waypoint. Immediate 
altitude capture is the default, where the aircraft is controlled within the safety limits of 
the controller to attain the altitude as soon as possible. The glideslope mode will have the 
aircraft follow the slope between waypoints, and is used for instance in the final approach 
leg during a landing. 


Command: Jump 

The Jump command instigates an immediate transition to another command in the list. 
This control is used for instance to repeat a sequence of commands. There are no FMS 
modes associated with the Jump command. 

Command: Circle 

The Circle command controls the aircraft to fly a circle pattern of a given radius about a 
waypoint. The lateral PID mode is set to ‘Circle’, the longitudinal mode set to 
AltitudeCommand. 



Figure 12. Circle Waypoint FMS Mode State Diagram 


Command: TakeOff 

The TakeOff command provides commands for an autonomous takeoff sequence. The 
FMS modes are set to a dedicated ‘TakeOff mode, which provide full throttle to the 
aircraft while maintaining heading on the runway based on steering and rudder inputs, as 
rudder and steering inputs are ganged together on the same servo command line. Once 
the rotation takeoff speed is reached, the aircraft performs a climb longitudinal maneuver 
while maintain lateral wings level, until a safe turning altitude is reached. 





Figure 13. Takeoff FMS Mode State Diagram 


Command: Landing 

The Landing command is used for automated landings. The aircraft is commanded to 
maintain a track between waypoints and command a constant descent rate until the 
ground sonars pick up a reading from the ground, and the aircraft attains the specified 
distance to the ground. Note that position information based on pressure and GPS may 
not be accurate enough to determine the flare maneuver, so the flare command will 
institute this command based on an ultrasonic altimeter located on the bottom of the 
aircraft. When the flare mode is excuted, the elevators are used to command a nose up 
attitude of the aircraft while power is reduced, until the altitude notifies that the rear 
wheels are on the ground. The power is cut while the elevator is used to drop the front 
wheel. 
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Figure 14. Land Command FMS Mode State Diagram 


Command: SetFMSMode 

The FMSModeTimed will command the specified FMS mode until a transition condition 
is realized. This command’s class structure is shown in Figure 15. 




Command 


+lnit() 

+Update() 

+ lsComplete() ; bool 


SetFMSMode 

-m_fmsLatMode : eFMSLatMode 
-m_fm$LonMode : eFMSLonMode 
-m_fmsSpeedMode : eFMSSpeedMode 
-m_transitionVariable : eTrasitionVariable 
-m_transitionCondition : eTransitionCortdition 
-m_transitionValue : double 
-mJatModeValue : double 
-mJonModeValue : double 
-m_spdModeValue : double 



«enumeration» 

eT ransitionCondition 

\ 

+GT 
-+EQ 
+ LT 

r / 

1 

1 



I 

«enumeration» 

eTrasitionVariable 

+AIRSPEED 
^ALTITUDE 
-+SONAR ALTITUDE 
■+ROLL ANGLE 
+ PITCH ANGLE 
^COMMAND TIME 
-+SYSTEM TIME 

/ 


Figure 15. SetFMSMode Command Class Diagram 

Flight Management System Modes 

The FMS receives command modes and targets from the active command, and outputs 
command instructions to the autopilot. The list of FMS modes currently implemented is 
shown in Table 2. 


Table 2. List of FMS Modes 


Lateral Mode 

DirectToWaypoint 

TrackToWaypoint 

Circle 

TaxiTrack 

CmdRoll 

CmdAileron 

Disabled (PilotCmd) 


Longitudinal Mode 

CmdSpeed 

CmdAltitude 

CmdVertTrack 

AltitudeAttain 

AltitudeHold 

CmdElevator 

CmdPitch 

Disabled (PilotCmd) 


Speed Mode 

CmdSpeed 

CmdAltitude 

CmdVertTrack 

AltitudeAttain 

AltitudeHold 

CmdThrottle 

Disabled (PilotCmd) 


Each mode is associated with one or more commands to the controller, and modes can be 
implemented as state machines. For instance, the CmdAltitude mode for both the lateral 
and longitudinal modes contains an internal state machine shown in Figure 16. 
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Figure 16. CmdAltitude Mode State Diagram 

The two state machines implementing an FMS mode and a command object could be 
integrated into a single machine; for instance, the DirectTo Waypoint command uses the 
CmdAltitude FMS state, but could implement the AltitudeAttain/AltitudeHold FMS 
states explicitly using the same state machine model. The reason to have two state 
machines is to help avoid redundant code. Since many different commands require the 
aircraft to attain then hold an altitude, this state machine was implemented as a common 
FMS control mode rather than duplicating the logic in several individual command 
machines. 


Autopilot Controller 

The controller object is responsible for implementing the feedback control loops that 
command the aircraft. The FMS object commands the controller by first setting high 
level modes, the providing actual target data. Similar to the FMS, there are three modes 
associated with the controller: lateral modes, longitudinal modes, and speed modes. 
Lateral modes control the ailerons and rudder, longitudinal modes control the elevator 
and also affect the rudder, and speed modes control the throttle. The controller modes are 
listed in Table 3. 


Table 3. Controller Modes 


Lateral 

Disengaged 
Roll Cmd 
Heading Cmd 


Longitudinal 

Disengaged 
Pitch Cmd 
Altitude Cmd 


Speed 

Disengaged 
Fixed Throttle 
Airspeed Cmd 




CrossTrack 

Circle 

Takeoff 


Airspeed Cmd Altitude Cmd 
Vert Speed Cmd Glide Slope 


The controller uses a cascaded control structure mainly composed of proportional- 
derivative-integral (PID) controller transforms. Several different paths can lead from 
sensor inputs to actuator command outputs, as shown in Figure 17. Specific paths are 
associated with enumerated controller modes. Lateral modes control the ailerons and 
rudder, longitudinal modes control the elevator and also affect the rudder, and speed 
modes control the throttle. 




Figure 17. Cascading PIP Control Structure in the Controller Class 


Dependability Analysis Requirements 
For an Electric Unmanned Aerial Vehicle (UAV) 


Corey Ippolito, Ganesh Pai, and Ewen Denney 
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Summary 

This document specifies the dependability analysis requirements for the Swift Unmanned 
Aircraft System (UAS). Section 1 gives a description of the system, a high-level concept of 
intended operations and an overview of the autopilot software to be deployed in the airborne part 
of the UAS. Section 2 specifies the analysis to be performed and the expected outcome. 


1 System Description 
1.1 The Swift UAS 

The Swift UAS comprises a single airborne system: the electrically powered Swift unmanned 
aerial vehicle (UAV), a primary and secondary ground control station (GCS) and communication 
links for remote control and telemetry. 

A pilot on the ground can control the UAV, or can it fly autonomously by following a 
nominal flight plan. The pilot might takeoff, land, or intercept at any time during flight. There is 
an off-nominal flight plan which describes the actions of a Contingency Management System 
(CMS), i.e., the failsafe trajectory, the procedures to be followed on the ground, and so on. The 
CMS is required is to keep the aircraft on range, so that if any crash occurs, it happens on range. 
The protocol for the CMS is: 

1 . If there is a failure of the primary pilot system, switch to the redundant secondary system, 
on a different channel. 

2. If the secondary also fails, engage the onboard autopilot. 

3. If the autopilot fails, force a spiral descent to impact. 

During semi-autonomous flight, the aircraft can operate in the primary pilot in control (PIC), or 
secondary pilot in control (SIC) modes, or in computer in control (CIC) modes. The GCS is used 
to upload commands to the UAV. 

Figure 1 gives a physical breakdown of the complete Swift UAS. In this breakdown, we are 
interested in the contributions of the Avionics sub-system (shown as enclosed by the dotted box) 
to UAS hazards. 

This will require reasoning about hazards from several perspectives. In particular: 
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1. From a mission perspective, i.e., specific environmental conditions during a specific 
phase of flight, in which there is an increased likelihood of unacceptable loss, e.g., 
sudden crosswind during takeoff (landing), obstacles in the flight path, etc. 

2. From the perspective of the machine (the UAS), e.g., specific machine states (such as 
failure states) in which there is an increased likelihood of unacceptable loss, and 

3. From the perspective of states of the avionics system, e.g., flight computer failure, which 
can contribute to an increased likelihood of unacceptable loss. These could take the form 
of interactions with other subsystems, or uncovered (failure) states, or interactions (which 
may or may not be legitimate) with environmental conditions that contribute to system 
hazards. 
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1 CDHU (Control and Data Handling Unit) Hardware 

PA. 1.1. 1.2.2 

1 FMS (Flight Management System) 

PA. 1.1. 1.2.3 

1 ESS (Embedded Software Systems) 

PA. 1.1. 1.2.4 

1 AP (Autopilot System) 

PA. 1.1. 1.3 

1 Communication Systems (COM) 

PA. 1.1. 1.4 

1 Flight Sensors (SENS) 

PA. 1.1. 1.4.1 

1 INS (ADHRS, IMU) 

PA. 1.1. 1.4.2 

1 GPS 

PA. 1.1. 1.4.3 

\ Air Data System (A IRDAT) ' 

PA. 1.1. 1.4.4 

^ DGPS S 

PA. 1.1.2 

"PayToad and"Mission Dat”Systerris"(P7LD) ~" 

PA. 1. 1.2.1 

Common Payload Data System (CPDS) 

PA. 1.1.3 

Actuation System (ACT) 

PA. 1. 1.3.1 

Control Surface Actuation (CS) 

PA. 1. 1.3.2 

Steering and Brake Actuation 

PA. 1.1.4 

Propulsion System (PRLP) 

PA. 1. 1.4.1 

Eectric Motor Propulsion System 

PA. 1.1.5 

Structures 

PA. 1. 1.5.1 

Fuselage Structure 

PA. 1. 1.5.2 

Fuselage Outer Mold Line 

PA. 1. 1.5.3 

Propulsion Support 

PA. 1. 1.5.4 

Avionics Mounting Structure 

PA. 1. 1.5.5 

Wing Structure 

PA. 1. 1.5.6 

Control Surfaces 

PA. 1.1.6 

Eectrical and Power System (EPS) 

PA. 1. 1.6.1 

Propulsion Power 

PA. 1. 1.6.2 

Avionics Power 

PA. 1. 1.6.3 

Actuation Pow er 

PA. 1. 1.6.4 

FV Regeneration System 

PA. 1.1.7 

Contingency Management System (CMS) 

PA. 1.2 

Ground Control System (GCS) 

PA. 1.2.1 

Rimary Ground Control Station 

PA. 1.2.2 

Secondary Ground Control Station 

PA. 1.2.3 

CPDS Payload Ground Station (PGS) 

PA. 1.3 

Flight Operation and Procedures (OPS) 

PA. 1.3.1 

Runw ay 

PA. 1.3.2 

Airspace 


Figure 1: Physical breakdown with Avionics subsystem highlighted 
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1.2 UAV Avionics 


The avionics onboard the UAV is the computer-based control system that accepts pilot input (or 
pre-programmed / uploaded commands), processes the input, and regulates the flight control 
surfaces. Figure 2 shows a conceptual layout of the avionics system, in the context of the UAS. 



1.3 Concept of Operations 

Figure 3 shows one of the concepts of operation for the Swift UAS. As seen in the figure, there 
are seven distinct phases of flight: 


(0 

Takeoff 

(ii) 

Climb 

(iii) 

Cruise 

(iv) 

Survey 

(v) 

Return Cruise 

(Vi) 

Descent 

(vii) 

Land 
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For this particular mission, the aircraft is operated out of line of sight, i.e., it will not always be 
within sight of the pilots or the GCS operator. However, there are safety observers stationed at 
pre-defmed locations on range, so as to ascertain the aircraft continues to be on range, and to 
identify situations in the environment that are potentially hazardous. 
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Figure 3: Concept of operations, showing different mission phases. 

The dependability analysis of the Swift UAS will need to take into account the notion that during 
the different phases of flight, not all hazards pose the same level of safety risk, e.g., loss of 
power is a hazard at any point during flight, whereas loss of the autopilot need not be a hazard 
during landing, but could be a hazard during cruise, survey, return cruise, etc. 

1.4 Autopilot Software 

See attached document: Corey Ippolito, “An Autonomous Autopilot Control System Design for 
Small-Scale UAVs”. 

2 Dependability Analysis Requirements 

This section specifies the analyses potentially beneficial for safety assurance of the system 
described in Section 1. 

1 . Fault tree analysis and / or Event tree analysis 

a. Generation of minimal cut sets 

b. Probabilistic analysis of failure probabilities for hazardous top events 

c. Event chains leading to system failure (or an undesirable outcome) 

d. Probabilistic analysis o 

2. Hazard analysis using a combination of fault trees and event trees 

3. Phased-mission analysis. 
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Goal of the Swift UAS 






Develop a fully autonomous, fully electric, zero- 
emissions human flight capable research vehicle 
platform using today's technologies and 
applicable for next generation aircraft research 

Build on existing Bright Star Gliders SWIFT 
airframe, a high performance glider 





Utilizes GOTS/COTS control hardware, 
algorithms, and infrastructure available at NASA 
Ames Research Center. 
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Swift UAS Specifications 




Geometry 

Wing Span: 

Length: 

Wing area: 

Aspect ratio: 

Speeds 

Speed, Cruise: 

Speed, Stall: 

Speed, V NE : 

Weight and Payload 
Weight, Empty: 

Weight, Max Take Off : 
Payload Capacity: 
Performance 

Maximum glide ratio: 
Rate of sink: 

Powered Rate of Climb: 
Est Max Endurance: 

Est Max Range: 

Takeoff Field Length: 
Service Ceiling: 

Control and Propulsion 
Engine: 

Propulsion: 


12.8m (42ft) 

3.4m (-lift) 

12.5 m 2 (136 ft 2 ) 

12.9 

45 knots (23 m/s) 

20 knots (10 m/s) 

68 knots (35 m/s) 

48 kg (106 lb) 

145 kg (320 lbs) 

100kg (220lbs) 

27:1 

36 m/min (1 18 ft/min) 

2.5 m/s 
~7 hours 
-500 km 
50m 

>7.6km (>25,000 ft) 

Electric Motor, 

Pusher Prop Config. 
Electraflyer 18hp/13.5kw 
DC Motor, 5.6KW-hr Li-Po 
1 ,5m (60”) carbon-fiber 


Propeller: 

Materials 

All Composite Wing Structure (Aramid/Carbon) 
Steel/Aluminum Fuselage Frame 
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Flight Vehicle System : Modifications 


Control Surfaces 

• L/R Elevons 

• L/R Flaps 

• Engine Speed Control 

• Steerable front wheel 



Structural Modifications 

• Tricycle landing gear structure 


Sensor Installation 

• GPS and DGPS Antenna Installation 

• Five-Hole Pitot Probe 

• Radio Antenna Pass Thru/Mounts 


Control Surface Modifications 

1 . Split control surfaces for redundancy 

2. Design/Install actuators on all control surfaces and 
controllable systems. 


Avionics Installation 

1 . Design/Install Isolated Mounting Structures 
Payloads 

2. Design avionics 

3. Install Flight Critical Control Systems 

4. Install C&DH/ Avionics System 


Propulsion System 

1 . Install engine system 

2. Install batteries 


Installation of Wheel 
Tiplets (kit) 
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Swift's Unique Characteristics 



• Low cost reconfigurable platform with 
characteristics of larger aircraft 

• Large flexible wing (13m/42ft span) 

• Wing structure is light-weight, 
flexible, simple, all-composite 

• Redundant actuation 

• Large payload capacity (~2001bs limited 
by COA) 

• All-electric, zero emissions platform 

• Slow cruise speeds ideal for long 
duration test segments 

• Capable high altitude flight 

• Quiet airframe structure (noise, 
emissions, EMI, etc.) 

• Custom autopilot/navigation system 

• Fully redundant and fully instrumented 
for local or remote autonomy 

• Immediate pilot preemption over 
redundant links for safe/immediate 
termination of experiments 


1\A‘ 
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Control Experiment Mission Concept 
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Remote Survey Mission Concept 
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Swift UAS Systems Breakdown 




PA. 1.0 

Complete Sw ift UAS System 

PA. 1.1 

Flight Vehicle System (FVS) 

PA. 1.1.1 

Avionics System (AVS) 

PA. 1.1. 1.1 

Flight Critical Control System (FCS) 

PA. 1.1. 1.2 

Control and Data Handling System (CDHS) 

PA. 1.1. 1.2.1 

CDHU (Control and Data Handling Unit) Hardware 

PA. 1.1. 1.2.2 

FMS (Flight Management System) 

PA. 1.1. 1.2.3 

ESS (Embedded Software Systems) 

PA. 1.1. 1.2.4 

AP (Autopilot System) 

PA. 1.1. 1.3 

Communication Systems (COM) 

PA. 1.1. 1.4 

Flight Sensors (SENS) 

PA. 1.1. 1.4.1 

INS (ADHRS, IMU) 

PA. 1.1. 1.4.2 

GPS 

PA. 1.1. 1.4.3 

Air Data System (AIRDAT) 

PA. 1.1. 1.4.4 

DGPS 

PA. 1.1.2 

Payload and Mission Data Systems (PYLD) 

PA. 1. 1.2.1 

Common Payload Data System (CPDS) 

PA. 1.1.3 

Actuation System (ACT) 

PA. 1. 1.3.1 

Control Surface Actuation (CS) 

PA. 1. 1.3.2 

Steering and Brake Actuation 

PA. 1.1.4 

Propulsion System (PRLP) 

PA. 1. 1.4.1 

Electric Motor Propulsion System 

PA. 1.1.5 

Structures 

PA. 1. 1.5.1 

Fuselage Structure 

PA. 1. 1.5.2 

Fuselage Outer Mold Line 

PA. 1. 1.5.3 

Propulsion Support 

PA. 1. 1.5.4 

Avionics Mounting Structure 

PA. 1. 1.5.5 

Wing Structure 

PA. 1. 1.5.6 

Control Surfaces 

PA. 1.1.6 

Electrical and Pow er System (EPS) 

PA. 1. 1.6.1 

Propulsion Power 

PA. 1. 1.6.2 

Avionics Power 

PA. 1. 1.6.3 

Actuation Pow er 

PA. 1. 1.6.4 

FV Regeneration System 

PA. 1.1.7 

Contingency Management System (CMS) 

PA. 1.2 

Ground Control System (GCS) 

PA. 1.2.1 

Primary Ground Control Station 

PA. 1.2.2 

Secondary Ground Control Station 

PA. 1.2.3 

CPDS Payload Ground Station (PGS) 

PA. 1.3 

Flight Operation and Procedures (OPS) 

PA. 1.3.1 

Runw ay 

PA. 1.3.2 

Airspace 


PA. 1.1 Flight Vehicle System 


PA1.2 Ground Station 
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Conceptual Avionics Layout 
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Swift UAS Actuation System 



00.006 


Maximum Upward r 0416m 

Deflection Distance 1 i-6388ir i 


,3073m 

[12.0969ln] 


0.0626m 

[2.4635inl 


Variable 


0.008 


Maximum Downward .0222m . 

Deflection Distance f.8723in1 I 




\s \ NASA Ames Research Center | UAS Mission Directed Autonomy Research 


• 


NASA Code TI Aeronautics - UVA Technical Seminar, April 2012 


11 






Swift UAS Landing Gear System 
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Actuation: Control Surface Specification 



A 3.5" Hinge, To Be Installed 
3.5" Hinge 

/Bl\ 2.5" Hinge, To Be Installed 
A 2.5" Hinge 


;2G.4724ir.J 


.2400m 

[?.45Q3in] 


.2331m 
[9.1 730 t-J 


,2413m 
[9.499 2in] 


.'.jIuiihIA^ilmuljIu 4J|J 
5 p ■ 1 1 > - iJjukun 

UUdJ UIH HHUKh £*1194 

VV NcIMII-^d W 'iHTOS 

Swift UAS Modifications: 
Wing Modifications 

woPWETApr fisa cowooriA. 

THF V&CRfM-.KM COKT.*IH:D H BIB 

DWWWQ £.71 SO = PKr-TFTTT OF 
<rtSERT COMPANY NAME HERE-. AWT 
EFRCDJC’ION H FART OR AS A WHOLE 

c.ippoiito 


WTIHOUTTW WRITTBCFEfflrt&SCrNQF 
<ri3ERT COMPANY IVAME FERF=- E 

A 

CWC-. MJ. 

ft*. 

PKHlTE-i 

;d | 

I UtE 1 If i 
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Swift UAS Propulsion System 
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Swift UAS Propulsion Power 



Battery System 

• 144 cells (10 A-hr, 3.7 V) 

• 1 8S, 8P Pack = 66.6V, 80 A-hr 

• Unit cell = 3S, 4P (1 1 . 1 V, 40 A-hr) 

• 80 lbs weight 


12VDC (Min/Max: 10-16VDC) 
250mA active, 8mA sleep 


OrionBMS A 

Jill 


Actuator 
Batteries A 


-CAN- 


Motor 




Current 
Sensor A 

Motor 

Controller 

r 


H 


jO -Bpc ''j 


PVTC-A 

CTC1-A 


Thermistors 

(4) 


Propulsion Battery A 


Current 
Sensor B 


"■Q-iw 


Thermistors 

(4) 

Propulsion Battery B 





CAN-to-USB 
Adapter A 


USB 


CPU Box 


USB 




Battery Enclosure 


NASA Ames Research Center | UAS Mission Directed Autonomy Research 

>o ' jy NASA Code TI Aeronautics - UVA Technical Seminar, April 2012 


15 



Swift UAS Avionics 




Power Mng 
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FCS (Flight Critical Systems) 



MCB1 (CS2-LIE) 

Servo Motor Controller 
CK S6PWM 
vt Dim: 1.7-*2.er*l- 
in: 24VDC 


MCA1 (CS1-LOE) 


MCB2 (CS3-LOF) 
Servo Motor Controller 
CK S8PWM 
v| Dim: 1.7'ii2.«*it1' 
In: 24VDC 


RX-B 

JR R1222 12Ch 
2 4GMx Receiver 
tmocwr 


RXA 

JRR1222 t2Ch 
2.4GH7 Receiver 


MCAS (CS1 1-Brake) 

Servo Motor Conlroler 
CK S6PWM 
Dim: 1.7*x2.6M- r, 
in: 24VDC 


NASA AMES RESI 
SWIFT UASl 


SHEET NAME 


(To CPU) 











•MC (Panel Mnu 
Connector*) 




— d 

























qj 



























-d 
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Instrumentation: CDHU 



To Opto 
Isolators / 
Muxes 


PWM Servo 


Commands 


\ Analog Sensor 

To Sensors . 

v y Signals 


Air Data Probe 

United Sensors, 

Inc. 


* 


Antenna 

GPS 


d* 


Antenna 

Novatel DGPS 


; ^ 




Antenna 

900MHz Omni 




Control 


Signals 


To Ground 
Station 


Externally 

Mounted 


IMU/GPS 

RockwellCollins 
Athena 111m 


DGPS 

Novatel OEM4-G2 


Radio Modem 

Microhard MHX- 
910 




FPGA Hardware Motor 
Control Board 

12-Channels 
(Aerotonomy/NASA ) 



I/O Board 

Parvus 

COM-1274 



£ 



Fli ght Computer 

ADL 945PC-L2400 - 
DualCore 1 .66GHz, 
2M cache 


Power Board 

Tri-M HPSC104- 
SER 




Avionics Box 


CPU 

Batteries 
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Instrumentation: Antennas and Probes 



Antenna 

Novatel DGPS 


Antenna 

GPS 


CJi 


Air Data Probe 

United Sensors, 

Inc. 

5E ' 


Antenna 

900MHz Omni 




Horizontal 
900MHZ 5dbi Rubber Duck Antenna 
http://www. l-com. com 







Ground Control System (GCS) 



P 


CPU 

• Laptop Control Station with Reflection 
Architecture for UAS C&C through 
avionics CPU. 


Controllers 

• USB Controller through avionics CPU 

• JR DSX9 2.4GHz DSM2 (bypass CPU) 


Reusing a well-tested redundant ground station 
configuration (EAV vehicle is shown). 


Wireless Communications: 

• 6dB 900Mhz Omnidirectional Antenna, 
5ft Fiberglass 


Wireless Communications: 

• Microhard Spectra 910 Wireless Modem 
(1 Watt Transmitter) 


Two completely separate, identical, and 
redundant ground stations. 







Autopilot Controller Overview 


Sensor Modules 


Autopilot Module 



FMS Controller 

Lat/Lon Modes and 


Modes 


Targets 


■=> 

FMS 


Controller 


Actuator 

Modules 


Actu , 
Comn 


ctor 
> 3 nds 



Vehicle 


Figure. Conceptual Data Flow and Components 
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Sample Mission Script Commands 


// Program the Autopilot System. 

objAutopilot.ClearCommandList(); 

objAutopilot.AddCommand_Takeoff ( 4500, -2000, 500.0, 80.0, 1000.0, -0.34907, 50.0 ); 
objAutopilot.AddCommand_FlyToTrack ( 8070.9, -6009.7,500.0, 80.0, 1000.0); 

// Following heading until specified altitude is reached. 

objAutopilot.AddCommnd_SetFMSMode ( HEADINGHOLD, 0.0, ALTCMD, 400.0, SPDCMD, 80, 

ALTITUDE, GT, 300 ); 

// Follow a preprogrammed path. 

cmd=objAutopilot.AddCommand_FlyToTrack ( 10107.0, -1390.7, 500.0, 80.0, 1000.0 ); 
objAutopilot.AddCommand_FlyToTrack ( 8904.5, -902.8, 500.0, 80.0, 1000.0); 
objAutopilot.AddCommand_FlyToTrack ( 6919.8, -5568.9,500.0, 80.0, 1000.0); 
objAutopilot.AddCommand_FlyToTrack ( 3357.4, 1364.9, 500.0, 80.0, 1000.0); 
objAutopilot.AddCommand_FlyToTrack ( -3319.9, 4457.2, 500.0, 80.0, 1000.0); 
objAutopilot.AddCommand_FlyToTrack ( -5436.1, 3980.7, 500.0, 80.0, 1000.0); 
objAutopilot.AddCommand_FlyToTrack ( -4371 .0, 1696.2, 200.0, 80.0, 1000.0); 
objAutopilot.AddCommand_FlyToTrack ( -741.1, 182.6, 50.0, 80.0, 1000.0); 
objAutopilot.AddCommand_FlyToTrack ( 2522.8, -1267.5,-10.0, 80.0, 1000.0); 
objAutopilot.AddCommand_Jump ( cmd ); 
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Autopilot Controller 


Autopilot 

-m_fms : FMS 

-m_controller : AP 

-m_vehicleState : AirplaneData 

+OnComponentUpdate() 

+OnComponentReset() 

+OnComponentlnit() 

+OnComponentTerminate() 


FMS 


•m_commandList[] : Command 
■^-m_pActiveCommand : Command* 
•m timelnCommand sec : double 


+Update() 


> 






AP 


^UpdateQ 




AirplaneData 


■m_position_en uft[3] 
■m_orientationEuler_rad[3] 
■m_indicatedAirspeed_fps[1] 
■m_altitude_sonarFt[1 ] 


0 ..* 


Command 

+lnit() 

+Update() 

+lsComplete() : bool 


DirectToWaypoint 


■m_position_enuft : double 
-m_speed_fps : double 
-m_radius_ft : double 
■m_initPosition_enuft : double 
-m_nextWaypointPos_enuft 
■mJsRadiusEnabled : bool 
-mJsPerpAxisEnabled : bool 
■mJsDynamicRadiusEnabled 


SetFMSMode 


-<H 


-m_fmsLatMode : eFMSLatMode 
-m_fmsLonMode : eFMSLonMode 
-m_fmsS peed Mode : eFMSSpeedMode 
-m_transitionVariable : eTrasitionVariable 
-m_transitionCondition : eTransitionCondition 
-m_transitionValue : double 
-mJatModeValue : double 
-mJonModeValue : double 
-m_spdModeValue : double 


«enumeration» 

eT ransitionCondition 


+GT 

+EQ 

+LT 


1 

1 

1 

1 

1 

J L , | 

1 1 

1 1 

1 1 

1 1 

1 1 

1 

\ \/ 

1 

\ \/ 

«enumeration» 

eFMSLonMode 


«enumeration» 

eFMSLatMode 

+FMSLONMODE DISENGAGED 
+FMSLONMODE ALTITUDE HOLD 
+FMSLONMODE TO ACCEL2VROT 
+FMSLONMODE TO FULLCLIMB 
+FMSLONMODE GLIDE 
+FMSLONMODE FLARE 


+FMSLATMODE DISENGAGED 
+FMSLATMODE FLYTOWAYPOINT 
+FMSLATMODE TRACKTOWAYPOINT 
+FMSLATMODE CIRCLE 
+FMSLATMODE TO ACCEL2VROT 
+FMSLATMODE WINGSLEVEL 





«enumeration» 

eTrasitionVariable 


+AIRSPEED 

+ALTITUDE 

+SONAR_ALTITUDE 

+ROLL_ANGLE 

+PITCH_ANGLE 

+COMMAND_TIME 

+SYSTEM TIME 


«enumeration» 

eFMSSpeedMode 


+FMSLONMODE_DISENGAGED 

+FMSLONMODE_ALTITUDE_HOLD 

+FMSLONMODE_TO_ACCEL2VROT 

+FMSLONMODE_TO_FULLCLIMB 

+FMSLONMODE_GLIDE 

+FMSLONMODE FLARE 


Figure. Top Level Classes 
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Autopilot Controller Architecture 



commands_pi 1 otRudder_mlpl 



commands_pi tch_rad 
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Autopilot Controller Architecture 


state_PiDSpdMode 


SPEED AP Mode 


0 = Disengaged 

1 = Fixed Throttle 

2 = Airspeed Cmd 

3 = Altitude Cmd 

4 = Glide Slope 



commands_pi 1 otTh rottl e_mlpl 
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Example FMS State Diagrams 


Command 


Direct To 
Waypoint 


Command 


Track To 
Waypoint 


Lateral 



Transition Criteria 

l 


Lateral 



Transition Criteria 


Longitudinal 


[Lon Mode in Waypoint] 


CmdSpeed 


CmdAltitude 


CmdVertTrack 


Longitudinal 


[Lon Mode in Waypoint] 


CmdSpeed 


CmdAltitude 


CmdVertTrack 


Speed 


[Spd Mode in Waypoint] 


CmdSpeed 


► CmdAltitude 


CmdVertTrack 


Speed 


[Spd Mode in Waypoint] 


CmdSpeed J 


k: 


CmdAltitude 


CmdVertTrack 


3 
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Example FMS State Diagrams 


FMS Lat Mode 


FMS Lon Mode 



AGtAirtUda m -Fi&'*A\I 
I'flL 7jf*ci?n£f?areA lt-fzAGL) * 
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Geometric Modeling 




Accuracy of the processing hardware of the 
controller box 


Geometric modeling utilized to derive 
computational fluid models, dynamics models 

Utilized robotic FaroArm for 3D geometric data 
acquisition and model generation 

Error Analysis 

• Position error maximum 
+/-9.00 mm 

• Variation of the drag cross sectio 
-2.78% to 2.73% 

• Variation of the lift cross section 
-0.56% to 0.57% 


Imperfections on the surface of the foil during its 
fabrication 


Play in the connection between the foil and the 
tip 


Tiny damages at the extremity of the plane due 
to previous flights 

✓ 


mes Hesearcn uenter | UAb Mission Directed au 

NASA Code TI Aeronautics - UVA Technical Seminar, April 2012 


Sources 

Low impact 

Medium impact 

Critical impact 

Imperfection in the assembly of the different 
parts of the plane 




Flexibility of the airfoil skin 

S 



Deformation of the stand supporting the foil 




Accuracy of the operator 




1 i»j 1 1 ya i in i 





Low impact Medium impact Critical impact 


Monitoring of the temperature 


Monitoring of atmosphere composition 

S 

Flatness of the ground 

S 

Accuracy of the touch probe 

S 

Accuracy of the kinematic chain of the robotic 

V 

arm 








Dynamic Modeling and Simulation 



Simulation studies used for dynamics 
and performance predictions, control 
law development 

Dynamic models generated from STAR 
Navier-Stokes analyses 

• Time consuming process, provides 
estimates for all major dynamic 
coefficients 

Lower fidelity method for comparison 

• X-Foil model using estimated properties 

• Vehicle Sketchpad / Vorview models 

Simulation Models 

• Linear model (Matlab) containing 
stability derivatives, control law 
development 

• Non-linear model for simulation testing 

Model assumptions and estimates will 
be continuously refined throughout 
development 

Flight test data will be used for 
parameter estimation 



X-Foil courtesy of Z.Mahboubi (Stanford/AA) 




Simulation Studies 



SketchPad /Vorview courtesy of J. Totah (NASA/ARC/TI) 
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Lift Coefficient, CL 


CFD 


• CFD model and analysis performed by John 
Melton (ARC-AUS) “ 

• STAR N-S analysis derived from geometry 

• Navier-Stokes drag coefficient estimates 
derived for small number of conditions 

• Assumed fully turbulent boundary layer 

• Comparisons with lower order models 

• Airfoil derivatives from X-Foil for 
comparison 


CL versus Angle of Attack CM versus Angle of Attack 

Numerical N-S CFD Results Numerical N-S CFD Results 
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Drag Coefficient, CD 


Planform 


lodelin: 

{ 



CD versus Angle of Attack 

Numerical N-S CFD Results CM versus An § le of Attack 

Numerical N-S CFD Results 




Wing Attack Angle (degrees) 


Research 
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6-DOF Simulation Model 


States: 

P e = [X e Y e Z e ] T ;V b = [uv w] T ; q = [q 0 q 1 q 2 q 3 ] T ; a ) b = [p q r] T 
Kinematics: 

Pe = (^E e P e) + P b 2 e V Z> 

q = — 0.5c5 b q 

Y b C^b ^ ^ b ) (j^e2b^“E e ^■e2b®‘E e ^b2e^ > b') P e 2 b§e 

+ m~ 1 {Fp Rb + [-Drag Y - Lift]R wi2b ) 
u> b = — J b 1 a) ft J b + J^fT^ + [L M N]) 

Dynamics: 

, N dCi /QSc\ dCi /QSc\ dCi 

Lift = QSC,>6„ P ) + Q . *, .3^#* + (-)-d + (-) . 

Drag = QSCd 0 + QS * Co fl (a, 6fi ap ) + QSC P ^ ^ ( ‘-flap ) + QSht ^eie + QS ^"^Tr j P 

Y = QSCyp(p) + QS (^-) + QS (^) 5rPr + Qs(A)Qp + Qs(^)(^)r 


b 2 /dC L \ /b 2 \/dC L \ /dC L \ / dC L \ 

L = QSCr,®+ « S ^t) r + «^2vj(d i r)' ) + < i Sb (d^) 5 ‘“ +QS « MA “(d^) 6 - 

/dC M \ / c \ dCjyi c 2 dC M — / dCjyj \ 

= q K^)“ + QS£Cm ° + Q ssc M„a P + Q s b)^ q+ QS 2V *“ **T + QS - MA - 1) 6 ' 


M 


ele 


N = QSbC N |3 + QS 


b 2 \ dCiv 


2 V/ dp 


p + QS 


b 2 \ dC N 
2V/”dT 


r + 


QSb (^) 5 ail + QS vt MA vt 5 rdr 


/ dC N 


• Table driven 
coefficients 

• Data filled in from 
NASA EAV model 
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Simulation 
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Development Status and Progress 









Preliminary Design 
Engine Integration 

• Preliminary Flight Test 
Modeling and Simulation 
Airframe Modification 

• Actuator installation, control surface snli 
gear installation 

Avionics Integration 

• Actuation System Integration 

• CDHS/ Autopilot Integration 

• Propulsion System Integration (completed April-2012) 


Acceptance and Environmental Testing 
Flight Worthiness Statement / AFSRB 
Flight Testing and Autopilot Tuning 
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